Abstract:As the IoT has developed, edge computing has played an increasingly important role in the IoT ecosystem. The edge computing paradigm offers low latency and high computing performance, which is conducive to machine learning tasks such as object detection in autonomous driving. However, data privacy risks in edge computing still exist and the existing privacy-preserving methods are not satisfactory due to the large computational overhead and unbearable accuracy loss. We have designed a privacy-preserving machine learning framework for both user and cloud data. Users and the cloud provide data for inference and training respectively, and the privacy protection of these two aspects is both considered in this paper. Users provide test data and want to access the data-processing models in cloud for inference, and the cloud provides the training data used for training an eligible model. For user data, in order to maintain the overall performance of the machine learning framework while using homomorphic encryption, instead of providing encrypted data to all machine learning tasks, we divide the neural network into two parts, with one part kept on the trusted edge and provided with plaintext, and the other deployed on the untrusted cloud and provided with encrypted input. For cloud data, we apply the binary neural network, a network with the binarized value of weights. This method is practical for narrowing the confidence score gap (between the training and test sets) predicted by the model, which accounts most for a successful exploratory attack on training data. Experiments demonstrate that the results of the adversary's membership inference attack are close to random guessing, and the accuracy is only slightly affected. Compared with the unencrypted network on VGG19, when the network is split from conv4_1 to fc8, the efficiency of using HE is only 100 to 30 times slower. (C) 2021 Elsevier B.V. All rights reserved.

PriPro: Towards Effective Privacy Protection on Edge-Cloud System Running DNN Inference.

A Distributed Privacy-Preserving Framework for Deep Learning with Edge-Cloud Computing.

Privacy for Rescue: A New Testimony Why Privacy is Vulnerable In Deep Models

Industrial Scale Privacy Preserving Deep Neural Network

A privacy protection approach in edge-computing based on maximized dnn partition strategy with energy saving

Penetralium: Privacy-preserving and memory-efficient neural network inference at the edge

Model Protection: Real-Time Privacy-Preserving Inference Service for Model Privacy at the Edge

Privacy-preserving Security Inference Towards Cloud-Edge Collaborative Using Differential Privacy

A privacy-preserving deep learning approach for face recognition with edge computing

EdgePro: Edge Deep Learning Model Protection Via Neuron Authorization

Not Just Privacy: Improving Performance of Private Deep Learning in Mobile Cloud.

Not just privacy: Improving performance of private deep learning in mobile cloud

PrivyNet: A Flexible Framework for Privacy-Preserving Deep Neural Network Training

EdgeSanitizer: Locally Differentially Private Deep Inference at the Edge for Mobile Data Analytics

SecoInfer: Secure DNN End-Edge Collaborative Inference Framework Optimizing Privacy and Latency

Defending CNN against privacy leakage in edge computing via binary neural networks

Learning from Differentially Private Neural Activations with Edge Computing

PriPHiT: Privacy-Preserving Hierarchical Training of Deep Neural Networks

Edge Deep Learning Model Protection via Neuron Authorization

Lightweight and Unobtrusive Privacy Preservation for Remote Inference Via Edge Data Obfuscation

Achieving Efficient and Privacy-Preserving Neural Network Training and Prediction in Cloud Environments